Duo First-Time Enrollment

How to enroll in Duo Multi-Factor Authentication

1. Introduction - Logging into a Duo-protected application enabled for self-enrollment takes you to the device management page to enroll. Click Get started to begin the setup process.
   1. 
2. Choose Your Verification Method - Choose the device type in the list that matches your available authentication options:
   1. Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app. This is CSS IT’s strongly recommended authentication method. Please select this option if you have a compatible device. The current version of Duo Mobile supports iOS 16 or greater and Android 11 or greater. Please note that you will need your Duo-enrolled device when you log in to most CSS systems.
   2. Phone number: Receive a one-time passcode in an SMS message or approve a login attempt with a phone call from Duo. This authentication method is offered for those whose phones are not compatible with the Duo Mobile app. Please only select this option if you cannot use Duo Mobile, as it is less secure.

Duo recommends the most secure option of the methods available to you, so it's a good idea to set up that method first if you have a device that supports it.

This is an example of the options on a MacBook with Touch ID available: 

Duo Mobile

Duo Mobile is an app that runs on iOS and Android phones and tablets. It's fast and easy to use, and doesn't require cell services. Duo pushes login requests to Duo Mobile when you have mobile data or wifi connectivity to the internet. When you have no data service, you can generate passcodes with Duo Mobile for logging in to applications.

The current version of Duo Mobile supports iOS 16 or greater and Android 11 or greater.

1. Select your country from the drop-down list and type your mobile phone number, and then click Add phone number.
   1. 
   2. If you're going to use Duo Mobile on a tablet (like an iPad) with no phone service, don't enter a phone number and click I have a tablet instead.
2. If you entered a phone number, double-check that you entered it correctly and click Yes, it's correct to continue (or No, I need to change it to go back and enter the number again).
   1. 
   2. If the phone number you entered already exists in Duo as the authentication device for another user then you'll need to enter a code sent to that number by phone call or text message to confirm that you own it. Choose how you want to receive the code and enter it to complete verification and continue.
      1. 
   3. Download and install Duo Mobile on your phone or tablet from the Google Play Store or Apple App Store. Once you have Duo Mobile installed click Next.
      1. 
   4. Open the Duo Mobile app or the camera app on your phone or tablet and add this account by scanning the QR code shown on-screen.
      1. 
      2. If you aren't able to scan the QR code, tap Get an activation link instead and then enter your email address to send the activation link to yourself. Follow the instructions in the email to activate the new account in Duo Mobile.
      3. If you're on a mobile device, tap Open Duo Mobile to activate the new account in Duo Mobile.
   5. When you receive confirmation that Duo Mobile was added click Continue.
      1. 
   6. You can now log in to Duo-protected applications with Duo Push or with a Duo Mobile passcode.

Phone for Call or Text

This option is suitable for mobile phones that can't run Duo Mobile, or office phones and landlines.

1. Select your country from the drop-down list and type your phone number, and then click Add phone number.
   1. 
   2. If this phone number is a landline and can't receive text messages, select the This is a landline phone option before continuing.
2. If you opted to add a landline, you can enter the landline's extension on the next screen and click Add extension or click Skip this step if you do not need to enter an extension for your landline.
   1. 
3. Verify that the phone number shown (and landline extension, if you entered one) is accurate and click Yes, it's correct to continue (or No, I need to change it to go back and enter the number again).
   1. 
   2. If the phone number you entered already exists in Duo as the authentication device for another user then you'll need to enter a code sent to that number by phone call or text message to confirm that you own it. Choose how you want to receive the code and enter it to complete verification and continue.
      1. 
4. When you receive confirmation of adding the new mobile phone number for texts or calls, click Continue to login to log in to the application with a passcode received via text message or a phone call from Duo.
   1. 
5. If you added a landline phone number, click Continue to log in to the application with a phone call from Duo.
   1. 
6. That’s it! You should now be logged in. Please use the MultiFactor Authentication Assistance request if you have any questions or encounter any issues!